[login] allow admins to remove users without supplying their password